OpenClaw VPS Security Preflight

• Outcome: Pass
• Latest audit: Jul 19, 2026 · 5:07 PM UTC
• Version: 1.0.0

Overview

This skill is a read-only VPS security preflight that checks local OpenClaw and Linux security posture without changing configuration or sending data out.

Install only if you want an agent to run local security checks on an OpenClaw VPS you control. Treat raw audit output as sensitive, avoid using --show-audit unless needed, and require separate explicit approval before applying any suggested remediation.

SkillSpector

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Session Persistence

Medium

• Category: Rogue Agent

Content

fi

if command_exists systemctl; then
  user_enabled=$(systemctl --user list-unit-files 'openclaw-gateway*.service' --state=enabled --no-legend 2>/dev/null || true)
  system_enabled=$(systemctl list-unit-files 'openclaw-gateway*.service' --state=enabled --no-legend 2>/dev/null || true)
  if [[ -n "$user_enabled$system_enabled" ]]; then
    pass 'An OpenClaw systemd service is enabled for reboot survival.'

• Confidence: 80% confidence
• Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Session Persistence

Medium

• Category: Rogue Agent

Content

if command_exists systemctl; then
  user_enabled=$(systemctl --user list-unit-files 'openclaw-gateway*.service' --state=enabled --no-legend 2>/dev/null || true)
  system_enabled=$(systemctl list-unit-files 'openclaw-gateway*.service' --state=enabled --no-legend 2>/dev/null || true)
  if [[ -n "$user_enabled$system_enabled" ]]; then
    pass 'An OpenClaw systemd service is enabled for reboot survival.'
  else

• Confidence: 80% confidence
• Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Session Persistence

Medium

• Category: Rogue Agent

Content

user_enabled=$(systemctl --user list-unit-files 'openclaw-gateway*.service' --state=enabled --no-legend 2>/dev/null || true)
  system_enabled=$(systemctl list-unit-files 'openclaw-gateway*.service' --state=enabled --no-legend 2>/dev/null || true)
  if [[ -n "$user_enabled$system_enabled" ]]; then
    pass 'An OpenClaw systemd service is enabled for reboot survival.'
  else
    warn 'No enabled OpenClaw systemd service was detected.'
  fi

• Confidence: 80% confidence
• Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Session Persistence

Medium

• Category: Rogue Agent

Content

fi

if command_exists systemctl && {
  run_quiet systemctl is-enabled apt-daily-upgrade.timer ||
  run_quiet systemctl is-enabled unattended-upgrades.service ||
  run_quiet systemctl is-enabled dnf-automatic.timer ||
  run_quiet systemctl is-enabled dnf5-automatic.timer;

• Confidence: 80% confidence
• Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Session Persistence

Medium

• Category: Rogue Agent

Content

if command_exists systemctl && {
  run_quiet systemctl is-enabled apt-daily-upgrade.timer ||
  run_quiet systemctl is-enabled unattended-upgrades.service ||
  run_quiet systemctl is-enabled dnf-automatic.timer ||
  run_quiet systemctl is-enabled dnf5-automatic.timer;
}; then

• Confidence: 80% confidence
• Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Session Persistence

Medium

• Category: Rogue Agent

Content

if command_exists systemctl && {
  run_quiet systemctl is-enabled apt-daily-upgrade.timer ||
  run_quiet systemctl is-enabled unattended-upgrades.service ||
  run_quiet systemctl is-enabled dnf-automatic.timer ||
  run_quiet systemctl is-enabled dnf5-automatic.timer;
}; then
  pass 'An automatic security-update service or timer is enabled.'

• Confidence: 80% confidence
• Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Session Persistence

Medium

• Category: Rogue Agent

Content

run_quiet systemctl is-enabled apt-daily-upgrade.timer ||
  run_quiet systemctl is-enabled unattended-upgrades.service ||
  run_quiet systemctl is-enabled dnf-automatic.timer ||
  run_quiet systemctl is-enabled dnf5-automatic.timer;
}; then
  pass 'An automatic security-update service or timer is enabled.'
else

• Confidence: 80% confidence
• Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Static analysis

No suspicious patterns detected.